Forum Discussion
NimbostratusWindows Print server 2012R doesn't work after changing G/W to F-5
Currently we have windows print server 2012R behind netscalar and when we try to migrate the server to F-5 we are facing issues. When the G/W IP of the server is changed to the F-5 default gateway, print services aren't working nor server team can access the node. We have fast-L4 configured on the VIP with auto-map enabled on it and server has loopback configured with the VIP We did clone one of the production nodes for test purpose, created a new node with default gateway as F-5 and it works fine but when we try to move the production node to F-5 we are having issues. Can anyone please help me, I am not able to resolve this print server issue
pushkar_misra_2Altocumulus
Do you have forwarding VS configured for the server subnet. For F5 to actually work as gateway a forwarding server would be needed for L2 traffic forwarding to allow a general traffic to reach the server.
It would be helpful if you could post config of F5 self IPs, VS and route map on server.
Sai_Mallampeta_Yes, i do have VS (IP forwarding concept)configured for the server subnet. I do have other VS that are working fine but I am having issues with the MS print servers. We did clone the print servers created another node 3&4, it works fine but not the production one 1&2. below is the configuration of the Printer VIP ltm virtual Printer { description Printer destination 10.33.17.124:any ip-protocol tcp mask 255.255.255.255 persist { source_addr { default yes } } pool Printer profiles { Printer-Fast-L4 { } http { } } source 0.0.0.0/0 source-address-translation { type automap } translate-address enabled translate-port disabled vs-index 29
This my Forwarding IP configuration on the F-5, so that backend servers can communicate with other internal servers ltm virtual Outbound-Forwarding { description "Inter-Vlan routing between Internal and External vlan's" destination 0.0.0.0:any ip-forward mask any profiles { MyL4Profile { } } source 0.0.0.0/0 translate-address disabled translate-port disabled vlans { External Internal_vlan314 Internal_vlan977 } vlans-enabled vs-index 48}
I_R_101_110Cirrus
What is the reasoning for the server sharing a loopback IP with the VIP? Are you doing layer 2 n-path and bypassing the F5 for the return traffic? And if so, why? Make the traffic flow symmetrical if possible. Also, if you must do n-path, you must disable the translate-address flag in your VIP. If you're not doing n-path - that loopback doesn't belong.
Could you also clarify whether you're having issue with the printer vip that you posted or the VIP that should be handling the default gateway traffic?